$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa File: aff52061-08df-3f5d-82f3-9bd999e3d55a.roa (raw, json) Hash identifier: XaaBtKb5BQfrdyM99kcPgvNZ4yy6nqfkKIQrUykf8DM= Subject key identifier: A4:F4:33:BE:0E:01:14:3A:91:22:77:6E:AE:92:6B:17:6B:FA:96:83 Certificate issuer: /CN=20a16a9a-6641-447a-8644-025fca0c6683 Certificate serial: 010D0C9F4328584DA3E55ADB8E4E188D3906FCC0 Authority key identifier: B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa Signing time: Mon 27 Apr 2026 01:00:24 +0000 ROA not before: Mon 27 Apr 2026 01:00:24 +0000 ROA not after: Sun 26 Jul 2026 01:00:24 +0000 asID: 214208 IP address blocks: 140.235.108.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a3:e5:5a:db:8e:4e:18:8d:39:06:fc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20a16a9a-6641-447a-8644-025fca0c6683 Validity Not Before: Apr 27 01:00:24 2026 GMT Not After : Jul 26 01:00:24 2026 GMT Subject: CN=7622d9fa-df0d-4308-b531-60c862b6dae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d8:26:37:ad:a9:97:c7:e9:dc:c5:67:69:54: c7:7e:f4:af:07:fc:ee:92:16:ae:99:56:00:b7:b7: 62:4b:63:08:57:2f:c5:ce:2f:d3:ad:87:f3:3c:d8: da:51:8f:cf:92:3b:e9:a7:91:0a:f0:48:c0:42:d7: 13:9a:48:af:bc:e6:d5:6b:a6:12:c0:5d:dd:a5:f1: c1:32:72:e0:46:0a:9f:61:51:68:65:8b:3f:b3:c8: 9b:1d:bb:cd:3e:1f:bb:4c:1b:0c:24:13:93:33:e3: 45:67:7a:e7:f0:63:2b:36:d4:d9:d9:12:e9:2c:21: 7f:d5:0e:c6:21:df:d7:a8:5d:1a:30:f8:8f:c8:f6: 07:80:c0:75:04:ba:67:65:a4:45:80:eb:64:3a:2f: d4:01:1d:c7:bd:b7:9c:49:37:dd:2e:eb:bb:2a:86: 7c:19:33:d0:ac:17:a4:2d:9e:e9:7c:05:ee:cf:0c: 59:50:88:35:ab:4b:6d:0a:9a:0d:28:97:f2:8a:b2: 8a:9f:e4:06:23:41:15:68:6f:51:d0:94:94:c6:6a: 97:0c:d5:35:25:fe:03:e3:72:19:ac:39:a8:19:7e: 5a:83:88:84:8e:b5:51:d9:b3:53:c6:ca:33:38:58: cc:85:4e:f1:a1:95:5e:9c:cd:e0:76:81:02:7c:d9: d7:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F4:33:BE:0E:01:14:3A:91:22:77:6E:AE:92:6B:17:6B:FA:96:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/aff52061-08df-3f5d-82f3-9bd999e3d55a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683/20a16a9a-6641-447a-8644-025fca0c6683.crl X509v3 Authority Key Identifier: keyid:B6:CF:2C:08:3D:F1:42:3E:67:6C:ED:A3:DF:CE:EC:BB:9B:30:C6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/20a16a9a-6641-447a-8644-025fca0c6683.cer sbgp-ipAddrBlock: critical IPv4: 140.235.108.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:78:23:f5:44:a9:4b:cf:3b:cb:b5:87:a7:f4:ea:26:a2:de: 24:45:d3:a9:b1:e8:c5:74:b9:b2:0f:85:46:bb:ae:12:ed:e7: e4:b9:f5:34:09:73:2c:e3:58:bc:13:45:b8:58:68:28:4e:e1: c3:a2:a8:9b:f1:c5:cc:63:a7:6c:c8:3e:7a:34:6c:1e:f3:1d: e8:bd:4a:c6:4a:2f:ee:a7:86:89:8b:cf:71:b5:23:a4:e3:8b: fd:57:84:61:78:65:7d:8b:ef:93:41:54:50:ee:a6:ee:2e:c8: ed:da:cb:15:69:84:d7:ac:9a:e5:16:c3:4b:61:ad:6b:5a:5c: db:53:b1:ce:3a:d2:73:38:d5:43:44:da:ae:06:03:17:4a:d4: 52:94:11:2d:6d:2a:05:1f:2c:f0:ef:92:a7:f8:79:44:22:22: 65:72:cd:ce:df:7f:8c:71:ca:de:c6:12:77:15:02:65:99:d8: f8:6c:4a:9d:05:74:02:89:01:e8:d1:7d:da:0f:63:d7:46:21: c6:68:44:fd:1c:2b:5e:63:53:1f:11:0d:db:a4:42:df:6f:45: 12:2c:00:00:77:fe:95:7a:d2:d7:58:f8:29:71:a9:21:ef:fb: c3:22:35:1e:69:fd:ec:e8:91:21:5a:1d:a8:2b:0a:a4:47:15: 9e:17:6c:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2j5Vrbjk4YjTkG/MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjBhMTZhOWEtNjY0MS00NDdhLTg2NDQtMDI1ZmNhMGM2 NjgzMB4XDTI2MDQyNzAxMDAyNFoXDTI2MDcyNjAxMDAyNFowLzEtMCsGA1UEAxMk NzYyMmQ5ZmEtZGYwZC00MzA4LWI1MzEtNjBjODYyYjZkYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutgmN62pl8fp3MVnaVTHfvSvB/zukhaumVYA t7diS2MIVy/Fzi/TrYfzPNjaUY/Pkjvpp5EK8EjAQtcTmkivvObVa6YSwF3dpfHB MnLgRgqfYVFoZYs/s8ibHbvNPh+7TBsMJBOTM+NFZ3rn8GMrNtTZ2RLpLCF/1Q7G Id/XqF0aMPiPyPYHgMB1BLpnZaRFgOtkOi/UAR3HvbecSTfdLuu7KoZ8GTPQrBek LZ7pfAXuzwxZUIg1q0ttCpoNKJfyirKKn+QGI0EVaG9R0JSUxmqXDNU1Jf4D43IZ rDmoGX5ag4iEjrVR2bNTxsozOFjMhU7xoZVenM3gdoECfNnXcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKT0M74OARQ6kSJ3bq6Saxdr+paDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMGEx NmE5YS02NjQxLTQ0N2EtODY0NC0wMjVmY2EwYzY2ODMvYWZmNTIwNjEtMDhkZi0z ZjVkLTgyZjMtOWJkOTk5ZTNkNTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjBhMTZhOWEtNjY0MS00NDdhLTg2 NDQtMDI1ZmNhMGM2NjgzLzIwYTE2YTlhLTY2NDEtNDQ3YS04NjQ0LTAyNWZjYTBj NjY4My5jcmwwHwYDVR0jBBgwFoAUts8sCD3xQj5nbO2j387su5swxgMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMGExNmE5YS02NjQxLTQ0N2EtODY0NC0wMjVm Y2EwYzY2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjOtsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABp4I/VEqUvPO8u1h6f06iai3iRF06mx6MV0ubIPhUa7rhLt5+S59TQJ cyzjWLwTRbhYaChO4cOiqJvxxcxjp2zIPno0bB7zHei9SsZKL+6nhomLz3G1I6Tj i/1XhGF4ZX2L75NBVFDupu4uyO3ayxVphNesmuUWw0thrWtaXNtTsc460nM41UNE 2q4GAxdK1FKUES1tKgUfLPDvkqf4eUQiImVyzc7ff4xxyt7GEncVAmWZ2PhsSp0F dAKJAejRfdoPY9dGIcZoRP0cK15jUx8RDdukQt9vRRIsAAB3/pV60tdY+ClxqSHv +8MiNR5p/ezokSFaHagrCqRHFZ4XbAg= -----END CERTIFICATE-----Generated at Wed May 13 14:23:35 2026 by rpki-client